MAL-2025-160824 Malicious code in muklis-4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b035e17e6c2d344e5e658fcda25c60add554a83d778006c95954ae9eb967329 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

siddheshtea (1.1.6) potentially affected by unknown CVE via muklis-4 (1.0.0)

muklis-4 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on muklis-4 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-160824...